#!/usr/bin/python
# Copyright (c) PLUMgrid, Inc.
# Licensed under the Apache License, Version 2.0 (the "License")

# run in project examples directory with:
# sudo ./hello_world.py"
# see trace_fields.py for a longer example

from bcc import BPF

# This may not work for 4.17 on x64, you need replace kprobe__sys_clone with kprobe____x64_sys_clone
#BPF(text='int kprobe__sys_clone(void *ctx) { bpf_trace_printk("Hello, World!\\n"); return 0; }').trace_print()

bfp_need_load = """

struct filepath {
    char raw_str[100];
};
BPF_HASH(start, struct filepath);

LSM_PROBE(file_permission, int cmd, union bpf_attr *attr, unsigned int size)
{
    bpf_trace_printk("Hello, World!\\n");
    return 0;
}

"""
BPF(text=bfp_need_load).trace_print()


